CVE-2019-17145

CVE-2019-17145 is a critical stack-based buffer overflow vulnerability in Foxit PhantomPDF version 9.6.0.25114, specifically during DXF to PDF conversion. It carries a high CVSS score of 8.8, indicating that an unauthenticated remote attacker could achieve arbitrary code execution with high impact on confidentiality, integrity, and availability, provided the user opens a malicious file or visits a malicious page. While user interaction is required, the vulnerability is relatively easy to exploit. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is there evidence of active exploitation or significant community discussion, suggesting it is not widely targeted.